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1 CLAIMS: 

2 1 . A method for visualizing patterns, such as change, on a compute infrastructure, 

3 a. Wherein any physical or logical concept within can be a node to be monitored for pattern, 

4 such as a business process, object or application, embedded devices; 

5 b. Wherein specific colors represent specific pattern conditions; 

6 c. Wherein a range of colors represents a range of pattern conditions; 

7 d. Wherein a combination of range coloration and individual colors are used to denote 

8 pattern conditions; 

9 e. Wherein individual elements in a compute infrastructure, called nodes , are monitored 

10 and patterns displayed; 

1 1 f. Wherein individual elements in a compute infrastructure are banded on a map by a set of 

12 common groupings, such as location, subnet, business owners etc; 

13 g. Wherein individual elements in a compute infrastructure can be banded together into a 

14 logical grouping and studied for patterns. These groupings overlay the individual elements on 

15 the map, such that the entire population of nodes can be visualized with respect to the logical 

16 grouping; 

17 h. Wherein in studying individual elements or node groupings for patterns, a subset of saved 

18 attributes called a Baseline can be used to further qualify and visualize patterns; and 

19 i. Wherein icons can be used to represent nodes (in a general sense). 
20 

21 2. A method for displaying text information on a map, 
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1 a. Wherein text is displayed on the icons on the map; 

2 b. Wherein text is assigned based on the value of a single attribute; 

3 c. Wherein text is the result of the output of a function, which takes as input multiple 

4 attributes; and 

5 d. Wherein text is a result of the output of a user defined function. 

6 

7 3. A method for grouping nodes within a map, 

8 a. Wherein the association between related nodes (e.g. location, in the preferred 

9 embodiment) is identified by grouping them within grid lines; and 

10 b. Wherein a plurality of methods of association is provided (e.g. nodes can be grouped into 

1 1 different grid lines, such as internetworking subnet association, location, business owner, etc.). 
12 

13 4. A method to compare alternate groupings of nodes to one another, 

14 a. Wherein selecting one or more saved node groups, highlights the nodes in that group, so 

15 that they can be observed in relationship to the whole population of nodes; 

16 b. Wherein the whole population remains visible; 

17 c. Wherein the nodes in the node group become obvious by means of altering the color of 

1 8 the border around the node; 

19 d. Wherein the nodes in the node group become obvious by means of a 3-dimensional 

20 effect, where the nodes in the node group apparently pop-out; 
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1 e. Wherein words, color, lines or graphics are used to identify nodes within the node group 

2 against the population of nodes; and 

3 f. Wherein the population of nodes patterns in an inverse manner (e.g. highlighting, 

4 receding, color pattern etc), so as to draw attention to the nodes in the node group. 
5 

6 5. A graph to identify the percent of pattern of all the nodes in a node group, 

7 a. Wherein the pattern in the overall population of nodes is contained in the pie chart; 

8 b. Wherein only the selected group's pattern is illustrated in the pie chart; 

9 c. Wherein any graph is used to illustrate pattern; 

10 d. Wherein exists an auto focus function, that will automatically select the node group with 

1 1 the most amount of pattern; 

12 e. Wherein exists an auto focus, that will automatically select and sort all node groups, 

13 displaying the one with the most pattern on the top, but allowing the user to cycle through all of 

14 the choices in rank order of most to least pattern; 

15 f. Wherein exists the ability to customize pattern colors on a global basis; and 

16 g. Wherein exists the ability to customize pattern colors on a per node basis, so that specific 

17 nodes have specific color ranges. 
IS 

19 6. The method as in any of the preceding claims wherein the pattern can be display as single 

20 color representing no pattern, such as green and another single color representing pattern such as 

21 red, 

12 
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1 a. Wherein the colors are selectable; and 

2 b. Wherein the colors can be selected on a per node basis. 

3 

4 7. The method as in any of the preceding claims wherein the pattern can be displayed as a 

5 range of color, 

i 

6 a. Wherein the colors are selectable; 

7 b. Wherein the colors can be selected on a per node basis; 

8 c. Wherein the contribution of individual attributes to the overall color can be controlled by 

9 the user such as in a weighted average; 

10 d. Wherein the color displayed is controlled by a number that is returned from a moving 

1 1 average function, whose values indicates the percentage in the color range to display; 

12 e. Wherein the number of samples that go into the moving average is controlled by the user 

13 as delta time; 

14 f. Wherein a trade secret algorithm, not frilly disclosed, displays the range of color from the 

15 rate of pattern, such that, an attribute that is normally high (e.g. CPU 90%) gravitates to green 

16 (good) over time, even though the average is high; 

17 g. Wherein the condition to determine the range of pattern is a user defined function, 

18 specific to the attribute being tested for pattern; and 

19 h. Wherein the user can determine to what degree the individual attributes contribute to the 

20 overall color. This allows individual attributes (e.g. CPU) to have greater impact on the color 

21 than less significant attributes (e.g. free pages in memory). 

13 
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8. The method as in any of the preceding claims wherein the custom timeframes can be 
selected, allowing the data that is used to contribute to a pattern computation and color display 
to come from specific recurring times. 

9. The method as in any of the preceding claims wherein the baselines are used to contain 
saved attributes results (e.g. TCP settings and CPU thresholds), 

a. Wherein the system functions normally without baselines such as using the last state is 
the default baseline; 

b. Wherein baselines contain all or a subset of the attribute values; and 

c Wherein baselines are used to highlight which nodes (in the general sense) have 
legitimate values for those attributes. In other words, nodes without legitimate values for 
attributes defined display differently. For example, nodes without CDROM disks have no 
legitimate attribute for CDROM Baseline and are turned gray when the CDROM baseline is 
selected. 

1 0. A pie chart to display the percentage of pattern in a specific Baseline, 

a. Wherein the percentage of pattern for all the attributes contained in the baseline is 
summarized graphically in a pie chart; and 

b. Wherein any alternate graph such as a bar chart can also be used to summarize pattern. 
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1 11. A drill down capability to limit the size of the population of nodes (in a general sense) 

2 being studied, 

3 a. Wherein the drill-down capability exists to limit the display to only the nodes in a group; 

4 b. Wherein the drill-down capability exists to limit the display to only the nodes that contain 

5 attributes in one or more saved Baselines; and 

6 c. Wherein exists a mechanism to combine via AND/OR conditions to display drill down 

7 from either baselines and node groupings to further limit a population. 
8 

9 12. A method to visualize temporal patterns in data, 

10 a. Wherein the user can view a compute infrastructure only using attribute data from 

1 1 specific timeframes (such as every Monday between 2PM and 4 PM) to either include or exclude 

12 from the visualization; 

13 b. Wherein the user can define a function that can customize timeframes, such as every 

14 Monday between 2 and 4 PM; and 

15 c. Wherein the user can string together by means of AND/OR conditions multiple functions 

16 for define multiple ranges of time from which to exclude or include attribute data. 
17 
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